# Feature Requests **URL:** https://forum.search-guard.com/c/search-guard-feature-requests/9.md [Latest](https://forum.search-guard.com/latest.md) · [Categories](https://forum.search-guard.com/categories.md) · [Tags](https://forum.search-guard.com/tags.md) --- ## [About the Feature Requests category](https://forum.search-guard.com/t/about-the-feature-requests-category/20)
**Author:** [@searchguard](https://forum.search-guard.com/u/searchguard)\ **Replies:** 0
Use this category to request new Search Guard features and enhancements --- ## [Missing permissions in SGS\_XP\_MONITORING](https://forum.search-guard.com/t/missing-permissions-in-sgs-xp-monitoring/5044)
**Author:** [@fbacchella](https://forum.search-guard.com/u/fbacchella)\ **Replies:** 2\ **Last updated:** [August 3, 2026, 7:31pm UTC](https://forum.search-guard.com/t/missing-permissions-in-sgs-xp-monitoring/5044 "2026-08-03T19:31:48Z")
Because of constant rebalance in my cluster, I need to start monitoring the endpoint \_internal/desired\_balance. But this destination needs the permission “cluster:admin/desired\_balance/get”. I think it should be include… --- ## [Question Regarding Role-Based Access Control with Nested Groups in Active Directory](https://forum.search-guard.com/t/question-regarding-role-based-access-control-with-nested-groups-in-active-directory/4588)
**Author:** [@Daisy](https://forum.search-guard.com/u/Daisy)\ **Replies:** 1\ **Last updated:** [May 30, 2025, 10:06am UTC](https://forum.search-guard.com/t/question-regarding-role-based-access-control-with-nested-groups-in-active-directory/4588 "2025-05-30T10:06:58Z")
Hi everyone, I’m currently setting up Search Guard for a small cluster (3-node Elasticsearch 8.11.1) and integrating it with our corporate Active Directory for authentication and authorization. So far, basic LDAP integr… --- ## [Support for Elasticsearch 7.17.24](https://forum.search-guard.com/t/support-for-elasticsearch-7-17-24/4513)
**Author:** [@akhileshbhatia](https://forum.search-guard.com/u/akhileshbhatia)\ **Replies:** 2\ **Last updated:** [October 4, 2024, 5:45pm UTC](https://forum.search-guard.com/t/support-for-elasticsearch-7-17-24/4513 "2024-10-04T17:45:26Z")
Hi everyone, is there a ETA for the release of support for ES 7.17.24? Asking for search guard classic and not FLX --- ## [Future of searchguard /w elastic fleet?](https://forum.search-guard.com/t/future-of-searchguard-w-elastic-fleet/4476)
**Author:** [@novaksam](https://forum.search-guard.com/u/novaksam)\ **Replies:** 1\ **Last updated:** [September 10, 2024, 12:09am UTC](https://forum.search-guard.com/t/future-of-searchguard-w-elastic-fleet/4476 "2024-09-10T00:09:13Z")
Hey all, As time is going on, it appears that elastic in peeling functionality out of individual beats, and diverting it to elastic agents (ex. Remove RSA2ELK deprecated modules by pkoutsovasilis · Pull Request #38037 ·… --- ## [Support for Elasticsearch 7.17.18](https://forum.search-guard.com/t/support-for-elasticsearch-7-17-18/2499)
**Author:** [@Shaw](https://forum.search-guard.com/u/Shaw)\ **Replies:** 1\ **Last updated:** [July 23, 2024, 11:28am UTC](https://forum.search-guard.com/t/support-for-elasticsearch-7-17-18/2499 "2024-07-23T11:28:52Z")
Hi Team, When will be the suite version for ES 7.17.18 will be released? I checked the git repo, their is the tag but not published. Can you publish that ASAP please? --- ## [Support for Elasticsearch 7.17.20](https://forum.search-guard.com/t/support-for-elasticsearch-7-17-20/2505)
**Author:** [@akhileshbhatia](https://forum.search-guard.com/u/akhileshbhatia)\ **Replies:** 1\ **Last updated:** [July 23, 2024, 11:25am UTC](https://forum.search-guard.com/t/support-for-elasticsearch-7-17-20/2505 "2024-07-23T11:25:49Z")
Hi everyone, is there a ETA for the release of support for ES 7.17.20? Asking for search guard classic and not FLX --- ## [Looking for Guidance on Configuring Elasticsearch with Search Guard in a Multi-Tenant Environment](https://forum.search-guard.com/t/looking-for-guidance-on-configuring-elasticsearch-with-search-guard-in-a-multi-tenant-environment/2513)
**Author:** [@Domsalvator23](https://forum.search-guard.com/u/Domsalvator23)\ **Replies:** 1\ **Last updated:** [June 27, 2024, 12:07pm UTC](https://forum.search-guard.com/t/looking-for-guidance-on-configuring-elasticsearch-with-search-guard-in-a-multi-tenant-environment/2513 "2024-06-27T12:07:21Z")
Hello Everyone :hugs:, As part of a project I’m working on, I have to put up an Elasticsearch multi-tenant environment, and I might use Search Guard for access control and security. Our objective is to guarantee that ac… --- ## [Store reports in tenants](https://forum.search-guard.com/t/store-reports-in-tenants/2163)
**Author:** [@Foxeronie](https://forum.search-guard.com/u/Foxeronie)\ **Replies:** 2\ **Last updated:** [June 20, 2024, 10:46am UTC](https://forum.search-guard.com/t/store-reports-in-tenants/2163 "2024-06-20T10:46:30Z")
Hey! We have multiple tenants with different permission for indices. To export data from searches, we need to enable the report feature. The problem is that every user can download any created report. They are not sto… --- ## [Multiple clientcert configuration](https://forum.search-guard.com/t/multiple-clientcert-configuration/2497)
**Author:** [@fbacchella](https://forum.search-guard.com/u/fbacchella)\ **Replies:** 0\ **Last updated:** [March 28, 2024, 4:42pm UTC](https://forum.search-guard.com/t/multiple-clientcert-configuration/2497 "2024-03-28T16:42:11Z")
I use two PKIs for authentication. One is from Active Directory and is used for real users, so I would like to resolve roles using LDAP. I have another one for technical accounts, which is not backed by LDAP for roles, a… --- ## [Body support for Signals HTTP Input of type GET](https://forum.search-guard.com/t/body-support-for-signals-http-input-of-type-get/2477)
**Author:** [@Raj.Jikadra](https://forum.search-guard.com/u/Raj.Jikadra)\ **Replies:** 6\ **Last updated:** [January 14, 2024, 6:15am UTC](https://forum.search-guard.com/t/body-support-for-signals-http-input-of-type-get/2477 "2024-01-14T06:15:08Z")
Elasticsearch search GET query requires to pass a body with it and with current Signals, HTTP Input does not support passing of JSON Body with it. Feature request: To enable passing of Json Body with GET requests on HTT… --- ## [Support for Elasticsearch 7.17.5](https://forum.search-guard.com/t/support-for-elasticsearch-7-17-5/2339)
**Author:** [@fabio80](https://forum.search-guard.com/u/fabio80)\ **Replies:** 3\ **Last updated:** [July 21, 2022, 2:46pm UTC](https://forum.search-guard.com/t/support-for-elasticsearch-7-17-5/2339 "2022-07-21T14:46:12Z")
Hi all, would it be possible to publish a build of Search Guard for Elasticsearch 7.17.5? Thanks, Fabio Corneti --- ## [Support for Elasticsearch 7.17.4](https://forum.search-guard.com/t/support-for-elasticsearch-7-17-4/2324)
**Author:** [@fabio80](https://forum.search-guard.com/u/fabio80)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 7:44pm UTC](https://forum.search-guard.com/t/support-for-elasticsearch-7-17-4/2324 "2022-06-10T19:44:34Z")
Hi all, is there an estimate for a Search Guard build compatible with Elasticsearch 7.17.4 ? Thank you, Fabio --- ## [Support for 7.15](https://forum.search-guard.com/t/support-for-7-15/2228)
**Author:** [@menno](https://forum.search-guard.com/u/menno)\ **Replies:** 3\ **Last updated:** [October 14, 2021, 2:11pm UTC](https://forum.search-guard.com/t/support-for-7-15/2228 "2021-10-14T14:11:37Z")
Hello, When can we expect searchguard release for elastic 7.15? Regards, Menno --- ## [Enable Basic Authentication to be configured as backup to SSO in Kibana](https://forum.search-guard.com/t/enable-basic-authentication-to-be-configured-as-backup-to-sso-in-kibana/2116)
**Author:** [@Doug\_Renze](https://forum.search-guard.com/u/Doug_Renze)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 3:02pm UTC](https://forum.search-guard.com/t/enable-basic-authentication-to-be-configured-as-backup-to-sso-in-kibana/2116 "2021-03-02T15:02:13Z")
As a SAML authentication user for the Kibana UI, it would be useful to be able to configure Basic Authentication methods (LDAP/internal users) as a backup authentication method, both for testing purposes and for when we … --- ## [Ingest manager and Kibana alerting 7.8.1](https://forum.search-guard.com/t/ingest-manager-and-kibana-alerting-7-8-1/1912)
**Author:** [@sc75651](https://forum.search-guard.com/u/sc75651)\ **Replies:** 16\ **Last updated:** [November 13, 2020, 4:37pm UTC](https://forum.search-guard.com/t/ingest-manager-and-kibana-alerting-7-8-1/1912 "2020-11-13T16:37:54Z")
Ingest manager (beta) was introduced in 7.8.0 - Fleet | Kibana Guide \[8.4\] | Elastic But this required ES Security to be enabled. Can SG work, in conjunction with ES Security enabled? else I am not 100% sure how we … --- ## [Add capability to define exclude\_patterns in sg\_roles.yml](https://forum.search-guard.com/t/add-capability-to-define-exclude-patterns-in-sg-roles-yml/1905)
**Author:** [@Doug\_Renze](https://forum.search-guard.com/u/Doug_Renze)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 2:15am UTC](https://forum.search-guard.com/t/add-capability-to-define-exclude-patterns-in-sg-roles-yml/1905 "2020-11-04T02:15:18Z")
TL;DR Add capability to define exclude\_patterns in sg\_roles.yml. Use Case As an administrator, I need to grant role-based access to specific indices only to certain users; all users (including those users) should have a… --- ## [Kibana Multitenancy add "Discovery" to tenant selection tab](https://forum.search-guard.com/t/kibana-multitenancy-add-discovery-to-tenant-selection-tab/1966)
**Author:** [@marwojt](https://forum.search-guard.com/u/marwojt)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 2:37pm UTC](https://forum.search-guard.com/t/kibana-multitenancy-add-discovery-to-tenant-selection-tab/1966 "2020-09-16T14:37:11Z")
Hi, It will be nice to add “Discovery” to tenant selection tab. Now we have “Show dashboard” and “Show visualizaton”. It could for example in order from left to right “Discovery” “Show dashboard” “Show visualizaton”. … --- ## [Support ES Inbuilt Security](https://forum.search-guard.com/t/support-es-inbuilt-security/1932)
**Author:** [@sc75651](https://forum.search-guard.com/u/sc75651)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 8:58pm UTC](https://forum.search-guard.com/t/support-es-inbuilt-security/1932 "2020-08-25T20:58:10Z")
As more and more features, for some reason need ES inbuilt Security enabled (Ingest Manager, SEIM Detections) etc… Do we know if the SG can be used in collaboration with ES Security enabled. I know this seems absurd, bu… --- ## [Limit User Access to modify kibana settings](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925)
**Author:** [@lzukel](https://forum.search-guard.com/u/lzukel)\ **Replies:** 7\ **Last updated:** [August 17, 2020, 12:37pm UTC](https://forum.search-guard.com/t/limit-user-access-to-modify-kibana-settings/1925 "2020-08-17T12:37:45Z")
Role based access control to limit some users from modifying Kibana Settings, index patterns, index management, lifecycle policies, rollups, transforms, remote clusters, snapshots, dev tools, etc… While being able to all… --- ## [Ability to Use template variables in To: email](https://forum.search-guard.com/t/ability-to-use-template-variables-in-to-email/1924)
**Author:** [@lzukel](https://forum.search-guard.com/u/lzukel)\ **Replies:** 1\ **Last updated:** [August 13, 2020, 2:06pm UTC](https://forum.search-guard.com/t/ability-to-use-template-variables-in-to-email/1924 "2020-08-13T14:06:13Z")
It would be nice to be able to use a value from the results as the To recipient when sending an email from signals. Example: I have an alert that returns a user’s email if the make a change. I would like to be able to s… --- ## [Option to return password hash on REST API](https://forum.search-guard.com/t/option-to-return-password-hash-on-rest-api/1890)
**Author:** [@brian](https://forum.search-guard.com/u/brian)\ **Replies:** 6\ **Last updated:** [July 16, 2020, 5:25pm UTC](https://forum.search-guard.com/t/option-to-return-password-hash-on-rest-api/1890 "2020-07-16T17:25:41Z")
7.8.0-42 Could an option be added that when enabled it allows for Searchguard REST API to return the password hash for an internal user? We are using Puppet to automate SearchGuard configuration and having the hash re… --- ## [SG Release for 7.8.0](https://forum.search-guard.com/t/sg-release-for-7-8-0/1870)
**Author:** [@sc75651](https://forum.search-guard.com/u/sc75651)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 3:43am UTC](https://forum.search-guard.com/t/sg-release-for-7-8-0/1870 "2020-06-24T03:43:19Z")
Is there a plan to release SG for ES 7.8.0 We might have discovered weird ES bug in 7.7.1 where OS CPU is always 100% on Hot (Indexing) nodes, due to which the ingestion is slow. SG 7.8.0 would help us prove this theor… --- ## [Searchgaurd for 7.7.1](https://forum.search-guard.com/t/searchgaurd-for-7-7-1/1849)
**Author:** [@sc75651](https://forum.search-guard.com/u/sc75651)\ **Replies:** 4\ **Last updated:** [June 5, 2020, 10:44am UTC](https://forum.search-guard.com/t/searchgaurd-for-7-7-1/1849 "2020-06-05T10:44:10Z")
ES 7.7.1 is released, can we know the timeline to release SG as we have production deployment scheduled this weekend and wanted to have quick turnaround if possible from.SG team. Thanks in advanced @srgbnd , sorry to me… --- ## [Search Guard for 7.7.0](https://forum.search-guard.com/t/search-guard-for-7-7-0/1833)
**Author:** [@sc75651](https://forum.search-guard.com/u/sc75651)\ **Replies:** 13\ **Last updated:** [May 22, 2020, 5:20pm UTC](https://forum.search-guard.com/t/search-guard-for-7-7-0/1833 "2020-05-22T17:20:12Z")
Any timeline when SG for 7.7.0 would be released --- ## [Search Gaurd for Elasticsearch 7.6.2](https://forum.search-guard.com/t/search-gaurd-for-elasticsearch-7-6-2/1792)
**Author:** [@sc75651](https://forum.search-guard.com/u/sc75651)\ **Replies:** 4\ **Last updated:** [April 13, 2020, 6:51pm UTC](https://forum.search-guard.com/t/search-gaurd-for-elasticsearch-7-6-2/1792 "2020-04-13T18:51:35Z")
Do we have timeline for 7.6.2 release? --- ## [Offline TLS Tool: CSR process](https://forum.search-guard.com/t/offline-tls-tool-csr-process/1735)
**Author:** [@jmb](https://forum.search-guard.com/u/jmb)\ **Replies:** 0\ **Last updated:** [January 10, 2020, 5:17pm UTC](https://forum.search-guard.com/t/offline-tls-tool-csr-process/1735 "2020-01-10T17:17:38Z")
As far as I can tell, the TLS Tool does not support signing the CSRs that it can generate. Have I missed something, or is that an option that could be added? This seems useful to simply separate the node keygen process … --- ## [Request for ability to add and remove individual users using sgadmin.sh](https://forum.search-guard.com/t/request-for-ability-to-add-and-remove-individual-users-using-sgadmin-sh/1706)
**Author:** [@nick.george](https://forum.search-guard.com/u/nick.george)\ **Replies:** 4\ **Last updated:** [January 4, 2020, 10:57pm UTC](https://forum.search-guard.com/t/request-for-ability-to-add-and-remove-individual-users-using-sgadmin-sh/1706 "2020-01-04T22:57:23Z")
Hi SG team, I’ve been playing around with using configuration management to manage the SG internal users (primarily by using sgadmin.sh). It would be fantastic to be manage users individually, is this already possible a… --- ## [Allow specifying default Kibana tenant per user or role](https://forum.search-guard.com/t/allow-specifying-default-kibana-tenant-per-user-or-role/1721)
**Author:** [@mikew](https://forum.search-guard.com/u/mikew)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 11:50am UTC](https://forum.search-guard.com/t/allow-specifying-default-kibana-tenant-per-user-or-role/1721 "2019-12-23T11:50:46Z")
Alice has access to two tenants, WebDev and Ops. By default Search Guard will always select Ops when she logs in because O comes before W in the alphabet. But Alice is in the WebDev team so the vast majority of the time … --- ## [Always visible indication of which Kibana tenant is being used](https://forum.search-guard.com/t/always-visible-indication-of-which-kibana-tenant-is-being-used/1720)
**Author:** [@mikew](https://forum.search-guard.com/u/mikew)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 11:30am UTC](https://forum.search-guard.com/t/always-visible-indication-of-which-kibana-tenant-is-being-used/1720 "2019-12-23T11:30:17Z")
I’ve started experimenting with multitenancy in Search Guard 6, not even got to production with it, and already I’m annoyed by how when a user has access to more than one tenant it feels like a game of try and guess or r… [Next page](https://forum.search-guard.com/c/search-guard-feature-requests/9.md?page=1)